Issue with URL re-direct after IDP authentication - signing Assertion

[Justin Russo]

Hi Scott,
Appreciate your response.
I will talk to my IDP , appears something is wrong at their end.
But is there a reason why you suggested not to use a certificate from entruch but to you the one provided during shib installation ?


________________________________
 From: "Cantor, Scott" <cantor.2 at osu.edu>
To: Shib Users <users at shibboleth.net> 
Sent: Thursday, July 11, 2013 11:03 AM
Subject: RE: Issue with URL re-direct after IDP authentication - signing Assertion
 

> The next step proposed by my IDP was for me to send my certificate so the
> Assertion can be signed and encrypted.
> I sent my certificate bought from entrust to my IDP, I added the new
> certificate path and certificate key path to by shibboleth2.xml.

Do not do that. Use the self-signed certificate created during installation.

> then as suggested by my idp i added the below to my shibboleth2.xml
> signing="true" encryption="true"

None of that has anything to do with them signing or encrypting anything, that causes you to sign requests. Unless you need that, don't.

> now what happens is when i login to my site url -
> https://dev.myapp.com/testsite, i get redirected to my IDP and after i login
> i see the below error page and the saml redirect doesnt happen.

That does not appear to be the SP, or Shibboleth, but their IdP.

> is the a reason why this doesnt sign at the first attempt. so i need to
> configure anything else.

You'd have to ask them, it's their software. Unless that location bar is lying, because that's not a Shibboleth SP URL, it looks like a SSO endpoint in an IdP to me.

-- Scott



--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130711/c325a168/attachment.html